® 



J 



Europaisches Patentamt 
European Patent Office 
Office europeen des brevets 



© Publication number: 



0 360 225 

A2 



© 



EUROPEAN PATENT APPLICATION 



© Application number: 89117311.4 
© Date of filing: 19.09.89 



© lnLClAG07B 17/04 



© Priority: 19.09.88 US 245479 

@ Date of publication of application: 
28.03.90 Bulletin 90/13 

© Designated Contracting States: 
CH DE FR GB U 



© Applicant: PITNEY BOWES, INC. 
World Headquarters One Elmcroft 
Stamford Connecticut 06926-0700(US) 

© Inventor: Pastor, Jose 
191 Wilton Road 
Westport, CT 06880(US) 



© Representative: Rltter und Edler von Flschern, 
Bernhard.Dipl.-lng. et al 
HOFFMANN - EITLE & PARTNER 
Arabellastrasse 4 
D-8000 MUnchen 81 (DE) 



© Electronic indicia In bitmapped form. 

© An item bearing bit-mapped indicia with informa- 
tion encrypted by a public key which verifies a 
status of the item and a method and apparatus for 
applying such indicia. The indicia represents an en- 
crypted message and has the form of an array of 
pixels, each pixel having a value selected from a 
predetermined set of values in accordance with a 
mapping of an encrypted message on to the array. 
Thus, a person having knowledge of the appropriate 
decryption key may scan the indicia to obtain the 
message and verify the status by decrypting the 
message. In one embodiment disclosed, the item is 
a mail piece and the status is the payment of post- 
age. The indicia may have the form of a binary 
M matrix transformed by matrix multiplication by a cor- 
responding Hadamard matrix and the encrypted 
m message may be encrypted using a public key en- 
(Scryption system. 
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ELECTRONIC INDICIA IN BIT-MAPPED FORM 



BACKGROUND OF THE INVENTION 

This invention relates to electronic postage me- 
ters and metering systems, and particularly to an 
improved method and apparatus for ensuring the 
validity of a postal indicia printed by a postage 
metering system. The terms electronic postage 
meter and metering system, as used herein, also 
refer to other similar systems, such as parcel regis- 
ters and tax stamp meters that dispense and ac- 
count for value, and generally to systems for apply- 
ing indicia to items to verify payment, or other 
status, for that item. 

Since a postage meter may be looked upon as 
a machine for printing money (i.e. symbols having 
value) security has always been considered the 
heart of postage meter operation. In prior postage 
meters an indicia is printed by letter press, using a 
uniquely engraved die containing postal informa- 
tion; the information being such that the metered 
postage indicia is traceable to a particular postage 
meter. Newer postage meters have been devel- 
oped that include electronically controlled printers 
such as thermal printers, ink jet, or dot matrix pin 
printers for printing the indicia. While these newer 
meters work well in concept they have significant 
security problems which must be addressed, since 
such indicia are easily printed by anyone having a 
suitably programmed computer and an appropriate 
printer. One way to ensure the validity of a particu- 
lar indicia has been to encode a message in the 
indicia in such a manner that an unauthorized per- 
son who does not know the encryption scheme 
cannot reproduce the appropriate encoding. Such 
meters using encoded information in the indicia are 
disclosed, for example in co-pending application 
Serial No. 724.372. to: Amo Muller, filed April 7, 
1985 and in a co-pending application by R. San- 
sone, entitled POSTAGE AND MAILING INFORMA- 
TION APPLYING SYSTEM, filed August 6. 1985, 
both assigned to the Assignee of the present ap- 
plication. 

In a system disclosed in application Serial No. 
515.073. to John Clark, filed July 18, 1983, and 
assigned to the Assignee of the present invention, 
there is taught another method and apparatus for 
producing coded indicia. This application teaches 
encoding such that the indicia is printed in nurr.an 
readable form with the pixels forming the »r»<:'c:a 
modified, by voids or displacements or the to. to 
produce a coded message which can the' ze 
decoded to verify that the coded informal?* ? 
identical to the human readable information x rne 
indicia. 

Still another form of coded indicia, using oa r 



code, is taught in commonly assigned U.S. Pat. No. 
4,660,221; to: Dlugos; issued April 21, 1987. 

Such systems generally are operative for their 
intended purpose, but suffer from limitations and 

5 disadvantages. Ftrst, in many cases the encryption 
scheme used to encode the information may be 
relatively simple and subject to attack by sophisti- 
cated computer analysis. Once a dishonest user is 
in possession of the encryption scheme used he 

io would be in a position to generate undetectable 
counterfeit indicia. When it is considered that high 
volume mailers such as insurance companies, 
credit card companies, or oil companies may 
spend hundreds of thousands, if not millions, of 

is dollars per year on postage, the incentive for such 
attacks can be easily seen. Another disadvantage 
of the above schemes is that it is highly desirable 
to use a distinct encryption key for each postage 
meter so that a breach of security for a single 

20 meter will not jeopardize the entire meter popula- 
tion. However, using conventional encryption, this 
approach would require that the Postal Service 
maintain a data base of keys for each of the 
hundreds of thousands of postal meters in service. 

25 As is described in the commonly assigned U.S. 
patent application Serial No. 140,051; to: Jose Pas- 
tor; for: SYSTEM FOR CONVEYING INFORMA- 
TION FOR THE RELIABLE AUTHENTICATION OF 
A PLURALITY OF DOCUMENTS; filed December 

30 31, 1987 (C-335) these problems are solved by the 
use of "public key" encryption systems, such as 
the generally known RSA encryption system. 
These systems provide two keys, one of which 
may be used to encrypt, but not decrypt, a mes- 
as sage, and a second key which is used to decrypt 
the message. By use of such a public key system 
in the manner described in the above referenced 
patent application, the disclosure of which is here- 
by incorporated by reference, distinct encryption 

40 systems may be provided for each meter, yet the 
Postal Service need only maintain a single public 
key to validate indicia. However, the use of the 
system taught in the above referenced patent ap- 
plication and the security of public key encryption 

49 schemes both require that large numbers be used, 
on the order of from 100 to 200 decimal digits, and 
be printed on a mail piece. Clearly, printing of such 
information in a conventional form as a string of 
decimal digits would be unacceptable. 

so Accordingly, it is an object of the present in- 
vention to provide an improved method for the 
validation of the status of an item, and particularly 
to validate the payment of postage on a mail piece. 

More particularly, it is an object of the present 
invention to validate a status of an item by applying 
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an indicia representative of large amounts of en- 
crypted data in an acceptable manner. 

Brief Summary of the Invention 5 

The above objects are achieved and the dis- 
advantages of the prior art are overcome in accor- 
dance with the subject invention by means of an w 
indicia applied to such item, and a method and 
apparatus for applying such indicia, which indicia 
represents an encrypted message and has the 
form of an array of pixels (i.e. picture elements) 
each having a value selected from a predetermined is 
set of values in accordance with a mapping of an 
encrypted message on to the array. Thus, a person 
having knowledge of the mapping and the appro- 
priate decryption key may scan the array to obtain 
the message and verify the status of the item by 20 
decrypting the message. 

in a preferred embodiment of the subject in- 
vention, the values are either one or zero and the 
array corresponds to binary matrix. 

In still another preferred embodiment of the 25 
subject invention, the message is encrypted using 
a public key encryption system such as RSA. 

Thus, it may be seen that the above objects 
are achieved in accordance with the subject inven- 
tion in a manner which is particularly advantageous 30 
for use with postage meters and similar systems 
using various forms of conventional, computer con- 
trolled printing, such as ink-jet printers or matrix 
printers. Other objects and advantages of the sub- 
ject invention will become apparent to those skilled as 
in the art from consideration of the attached draw- 
ings and the detailed description set forth below. 

BRIEF DESCRIPTION OF THE DRAWINGS 40 

Fig. 1 shows a block diagram of a system 
for printing an indicia in accordance with the sub- 
ject invention. 45 

Fig. 2 shows a flow chart of the operation of 
the system of Fig. 1. 

Figs. 3A and 3B show a binary matrix of 
data representative of encrypted data and a cor- 
responding array of pixels, respectively. 50 

Fig. 4 shows a binary matrix of data resulting 
from the transformation of the matrix of Fig. 3A. 

Fig. 5 shows a mail piece marked with a 
postal indicia in accordance with the subject inven- 
tion. 56 

DETAILED DESCRIPTION OF PREFERRED EM- 
BODIMENTS 



Fig. 1 shows a postage metering system 10 in 
accordance with the present invention. System 10 
includes CPU, or microprocessor, 12, which op- 
erates under the control of a program residing in 
PROM 14 and controls the basic meter functions, 
performs calculations based on any input data, and 
controls the flow of data into the various memories. 
Typically, a random access memory (RAM) 15 is 
connected to CPU 12 for the storage of real time 
information and for real time accounting of critical 
information including the updating of ascending 
and descending meter registers, which record the 
postage value expended and available respectively. 
The register values are then stored in more perma- 
nent form in non-volatile memory 16 either when 
power is interrupted or on a real time basis, as is 
well known in the art. 

The system operates in accordance with data 
(e.g. the postage value to be metered) supplied 
from an input, such as keyboard 18, or from an- 
other remote communication device. Such opera- 
tion of postage meters is well known and is de- 
scribed for example in U. S. Pat. No. 4,301.507, to 
Soderberg. 

Metering system 10 differs from conventional 
postage meters using letter press printing in that 
CPU 12 is coupled to conventional, non-secure 
printer 20. Printer 20 receives print signals from 
CPU 12 for printing of postal information on an 
envelope, label or the like. Printer 20 may be a 
conventional dot-matrix pin printer or any one of a 
number of like devices, such as ink jet printers, 
thermal printers or LED printers, suitable for receiv- 
ing electronic signals and applying corresponding 
pixels to an item. In accordance with the subject 
invention security against production of counterfeit 
indicia is not found in making the printer physically 
secure but in the form of the indicia (i.e. encryp- 
tion). 

As also seen in Rg. 1 CPU 12 is coupled to 
encryption/transformation module 22. Module 22 
operates on data to generate an encrypted mes- 
sage in the manner descnbed in the above referen- 
ced commonly assigned patent application Serial 
No. 140,051. This message is preferably encrypted 
using a public key encryption system, most prefer- 
ably RSA, and formatted as a binary matrix as will 
be described further below. In another embodiment 
of the subject invention, the initial binary matrix 
containing the message may be transformed by 
matrix multiplication as wili be further described 
below. 

Rg. 2 shows a flow chart of the functions 
performed in module 22. It will be understood by 
those skilled in the art that, while module 22 is 
shown as a physically separate module including a 
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microprocessor, which communicates in a conven- 
tional manner with CPU 12. that, depending upon 
the computational power of CPU 12, the functions 
shown in Fig. 2 may be performed by means of a 
program stored in PROM 14 and executed in a 
conventional manner by CPU 12. 

Digital data is input at 30 and encrypted at 32 
in accordance with public key 34 as is described in 
the above referenced commonly assigned patent 
application Serial No. 140.051. At 38 the encrypted 
data is put into binary format and, preferably, an 
error code is generated and added. (The error 
code is conventional and may be a simple parity 
bit or may be a more extensive error detecting or 
correcting code.) At 38 the resulting binary code is 
mapped onto an m x n matrix in a predetermined 
manner, resulting in a binary matrix substantially 
similar, though generally larger than that shown in 
Fig. 3. 

To represent 100 decimal digits, approximately 
333 binary bits are required. This information may 
be mapped in any predetermined manner, by rows, 
columns, etc. into a 19 x 19 matrix. To represent 
300 decimal digits, approximately 1,000 binary bits 
are required, which may be mapped into a 32 x 32 
binary matrix. Thus, assuming a scanning resolu- 
tion of 32 pixels per inch, which is a pixel size of 
approximately .8 x .8 millimeters, 1.000 decimal 
digits may be represented as a bit mapped array of 
pixels one inch square. 

In one embodiment of the subject invention, 
illustrated by path A in Fig. 2, the binary matrix 
resulting at 40 is directly serialized and output for 
printing at 48. resulting in an array of pixels sub- 
stantially similar, though generally larger than, that 
shown in Fig. 3B. 

In another embodiment of the subject inven- 
tion, the image formed at 40 may be transformed 
as described in commonly assigned U.S. applica- 
tion Serial No. 762,990; by matrix multiplication. In 
accordance with this embodiment of the subject 
invention, a matrix transformation is applied to the 
initial matrix produced at 40 at 42. A suitable and 
convenient transformation is a matrix multiplication 
of the form: 
(IM) = (A) (OB) (A) 

where (A) is a Hadamard matrix of the same size 
as the initial matrix (OB) ( shown as 8 x 8 in Fig. 3, 
and (IM) is the resultant transformed matrix prod- 
uct. 

Hadamard matrices are a weM known form of 
matrix which have the following ccaerties: the first 
element of (IM) is the weight of *OB), that is the 
total number of ones in (OB); the number of bits 
required to represent a single element of (IM) is 
determined by the weight of (OB) t that is nine bits 
to represent a weight of 1 ,023 in a 32 x 32 matrix; 
and the elements of (IM) may be either positive or 



negative but are ail of the same parity. 

Preferably, to avoid printing negative numbers, 
the parity of the total number of bits in (OB) is odd. 
That is, for a 32 x 32 matrix we allow only up to 

5 1,023 ones. Negative numbers may then be repre- 
sented by the complement to the maximum al- 
lowed number of ones (i.e. 1,023), avoiding the 
need for an extra sign bit. As is also taught in 
application Serial No. 762,990, the resulting matrix 

io may then be printed with two-fold or four-fold sym- 
metry by reflection about a vertical and/or horizon- 
tal axis. Fig. 4 shows the binary matrix resulting 
from a transformation as described above applied 
to the matrix of Fig. 3A. 

is It is recognized that application of the above 
described transformation to matrix (OB) will sub- 
stantially increase the size of the resulting pixel 
array, perhaps to the point where the array would 
be unacceptably large for printing on an envelope. 

20 However, it is within the contemplation of the sub- 
ject invention to, at least partly, compensate for this 
by the use of color or gray scales to increase the 
number of bits which may be represented by each 
pixel; and it should be recognized that the redun- 

25 dancies introduced by symmetrical printing and/or 
error codes may allow the use of smaller pixel 
sizes while still obtaining satisfactory results. It 
should also be recognized that larger image sizes 
may be acceptable on documents, such as mani- 

oo fest, which are intended to accompany shipments 
or bulk mailings. 

Fig. 5 shows an item to be mailed 50 (l.e. an 
envelope) marked with an indicia 52 produced in 
accordance with the subject invention. Indicia 52 

35 includes the following plain text information relating 
to the item: a postage amount 54, a date 58 on 
which the item was metered, an ID number 60 for 
the meter, and a second ID number 62 for the 
postal station which the item is to be delivered in 

40 accordance with U.S.P.S. regulation for metered 
mail. Indicia 52 also includes a binary array 66 
comprising a mapping of a public key encryption of 
at least a portion of the plain text information to- 
gether with additional information as described in 

45 the above referenced, commonly assigned patent 
application. Binary array 62 consists of approxi- 
mately 600 binary pixels; (without reflection) and is 
equivalent to approximately 1 80 decimal digits; am- 
ple to provide security for a message encrypted 

so with the preferred RSA encryption technique. 

The above description and drawings have been 
provided by way of illustration only, and will enafcle 
those skilled in the art to recognize numerous other 
embodiments of the subject invention. Accordingly, 

55 limitations on the subject invention are to be found 
only in the claims set forth below. 
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Claims 

1. An item bearing an indicia, said indicia veri- 
fying the status of said item, and wherein said 
indicia represents an encrypted message and has 
the form of an array of pixels having a values 
selected from a predetermined set of values in 
accordance with a mapping of said encrypted mes- 
sage onto said array, whereby a person may scan 
said array to obtain said message and verify said 
status by decrypting said message. 

2. An item as described in claim 1 wherein said 
status is the payment of postage for said item. 

3. An item as described in claim 1 wherein said 
set of values consists of two discreet values cor- 
responding to 0 and 1 . 

4. An item as described in claim 3 wherein said 
mapping comprises an initial mapping to form an 
initial array and a transformation of said initial array 
by matrix multiplication. 

5. An item as described in claim 4 wherein said 
multiplication has the form (A) (OB) (A), and 
wherein A is a Hadamard matrix and OB cor- 
responding to said initial array. 

6. An item as described in claim 5 wherein said 
encrypted message is encrypted using a public 
key encryption key scheme. 

7. An item as described in claim 1 wherein said 
encrypted message is encrypted using a public 
key encryption scheme. 

8. An apparatus for applying indicia, said indi- 
cia verifying the status of items upon which said 
indicia are applied, comprising: 

means for applying an array of pixels, said pixels 
having values selected from a predetermined set of 
values; 

means for selecting said values for said pixels in 
accordance with a mapping of an encrypted mes- 
sage onto said array. 

9. An apparatus as described in claim 8 
wherein said status is the payment of postage. 

10. An apparatus as described in claim 9 
wherein said array corresponds to a binary matrix 
and wherein said selecting means further com- 
prises means for generating an initial mapping of 
said encrypted message onto an initial binary ma- 
trix and means for transforming said initial matrix 
by matrix multiplication to form said corresponding 
binary matrix. 

11. An apparatus as described in claim 10 
wherein said matrix multiplication has the form A 
(OB) A, and wherein (A) is a Hadamard matrix and 
(OB) is said initial matrix. 

12. An apparatus as described in claim 11 
further comprising means for generating said en- 
crypted message in accordance with a public key 
encryption system. 

13. An apparatus as described in claim 8 fur- 



ther comprising means for generating said encryp- 
ted message in accordance with a public key en- 
cryption system. 

14. A method of verifying the status of an item 
5 comprising the steps of 

a) encrypting a message, said message be- 
ing representative of said status; 

b) selecting values for an array of pixels 
from a predetermined set of values in accordance 

w with a mapping of said encrypted message onto 
said array; and, 

c) applying said array to said item. 

15. A method as described in claim 14 wherein 
said status is the payment of postage. 

rs 16. A method as described in claim 15 wherein 
said array corresponds to a binary matrix and 
wherein said selecting step comprises the further 
steps of generating an initial mapping of said en- 
crypted message onto an initial binary array and 

zo matrix multiplying said initial binary matrix to form 
said corresponding binary matrix. 

17. A method as described in claim 16 wherein 
said matrix multiplication has the form (A) (OB) (A), 
and wherein (A) is a Hadamard matrix and (OB) is 

25 said initial binary matrix. 

18. A method as described in claim 17 com- 
prising the further step of generating said encryp- 
ted message in accordance with a public key en- 
cryption system. 

30 19. A method as described* in claim 14 com- 
prising the further step of generating said encryp- 
ted message in accordance with a public key en- 
cryption system. 

35 
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FIG. 2 
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